515 matches found
calibre-web 安全漏洞
Calibre-Web is a web application for browsing, reading and downloading eBooks from the Calibre database. A security vulnerability exists in calibre-web that stems from the fact that calibre-web is prone to business logic errors...
Business Logic Errors
dolibarr/dolibarr is vulnerable to business logic errors. An attacker can exploit this flaw by providing a negative price amount to the create function in don.class.php as it does not properly check user input negative price amounts...
Business Logic Errors in silverstripe/silverstripe-framework
Description SilverStripe Framework is vulnerable to Business Logic Errors in the Failed login count since that value can be a negative number. Proof of Concept 1.After login, go to Security page under the path /admin/security/ 2.Click on any member record 3.In the member edit form, enter a negati...
PT-2022-13010 · Dolibarr · Dolibarr
Name of the Vulnerable Software and Affected Versions: dolibarr affected versions not specified Description: The issue concerns an improper validation of specified quantity in input, leading to business logic errors. This occurs because the application does not check the input of price numbers,...
Dolibarr 输入验证错误漏洞
Dolibarr is a software application. A modern software package that helps manage your organization's activities. Dolibarr suffers from an input validation error vulnerability that stems from Dolibarr being prone to business logic errors...
Business Logic Errors in dolibarr/dolibarr
Description The application does not check the input of price number lead to Business Logic error through negative price amount. Proof of Concept 1. Go to Product and Services area htdocs/product/index.php 2. Create a new or edit an item, insert a negative amount into Selling price field. Also in...
CVE-2021-39968
Changlian Blocklist has a Business Logic Errors vulnerability .Successful exploitation of this vulnerability may expand the attack surface of the message class...
Information disclosure
Changlian Blocklist has a Business Logic Errors vulnerability .Successful exploitation of this vulnerability may expand the attack surface of the message class...
CVE-2021-39968
Technical details about CVE-2021-39968 are not publicly available in the provided documents. Monitor for updates from vendors and security databases.
CVE-2021-39968
Changlian Blocklist has a Business Logic Errors vulnerability .Successful exploitation of this vulnerability may expand the attack surface of the message class...
PT-2022-11095
Name of the Vulnerable Software and Affected Versions Changlian Blocklist affected versions not specified Description The issue is related to Business Logic Errors, which may increase the attack surface of the message class upon successful exploitation. Recommendations At the moment, there is no...
CVE-2021-39968: Undefined Security Weakness
Changlian Blocklist has a Business Logic Errors vulnerability .Successful exploitation of this vulnerability may expand the attack surface of the message class...
YetiForceCrm processing logic error vulnerability
YetiForceCrm is an open source crm system from the Polish company YetiForce. Yetiforcecrm suffers from a processing logic error vulnerability, which stems from Yetiforcecrm being vulnerable to business logic errors. No detailed vulnerability details are currently available...
GHSA-7V7W-F7C6-F829 YetiForceCRM is vulnerable to Business Logic Errors because product amount can be a negative number
YetiForceCRM is vulnerable to Business Logic Errors because product amount can be a negative number...
YetiForceCRM is vulnerable to Business Logic Errors in the weight of a product
YetiForceCRM is vulnerable to Business Logic Errors in the Weight of a Product since that value can be a negative number...
GHSA-CXG7-84WP-8PCQ YetiForceCRM is vulnerable to Business Logic Errors in the weight of a product
YetiForceCRM is vulnerable to Business Logic Errors in the Weight of a Product since that value can be a negative number...
CVE-2021-4117
yetiforcecrm is vulnerable to Business Logic Errors...
CVE-2021-4117
yetiforcecrm is vulnerable to Business Logic Errors...
